MayteraOS Third-Party Licenses
Cryptography
MayteraOS does not link a third-party crypto library. kernel/crypto/ is an
in-house, from-scratch implementation used by the TLS 1.3 stack, SSH, and the
capability-token system: AES, SHA-256/SHA-512, RSA (PKCS#1), ECDSA (P-256/P-384),
Ed25519, ChaCha20, HMAC, a hardware-seeded CSPRNG, and MD4/MD5 (kept only for
legacy protocol compatibility, not used for anything security-sensitive). An
earlier plan to adopt wolfSSL and LibTom for this was not carried out; nothing
from either project is present in the tree.
- License: MayteraOS original code, part of the project's own GPLv2-or-later.
- Location:
kernel/crypto/
Browser Engine
The browser (userland/apps/browser/) links five NetSurf libraries plus the
Duktape JavaScript engine, vendored at pinned upstream commits with a small
MayteraOS-authored binding layer on top (DOM/CSS bindings, layout glue, and the
freestanding shims each library needs to build without a hosted libc).
NetSurf libraries (libwapcaplet, libparserutils, libhubbub, libcss, libdom)
- License: MIT (the individual NetSurf libraries; the browser front end itself is GPLv2, not linked into this port)
- Website: https://www.netsurf-browser.org
- Used for: HTML/CSS parsing, DOM, style selection
Duktape
- License: MIT
- Website: https://duktape.org
- Used for: in-page JavaScript execution
Image Processing
Image decoding (BMP, JPEG, PNG, WebP) is original MayteraOS code
(kernel/gui/*.c and the Rust ports under kernel/rustkern/), not a
vendored decoder. stb_image is not present in the tree.
Icons
SVG Repo icons
- License: CC-BY (attribution required)
- Website: https://www.svgrepo.com
- Used for: source artwork for a subset of the desktop/Start-menu icon set. The majority of icons added since 2026-07-20 are original MayteraOS line art, not SVG Repo sourced; the full per-icon table is kept in the repo's ATTRIBUTION.md.
Fonts
DejaVu Sans (in the OS)
- License: Bitstream Vera license (permissive) plus DejaVu's own public-domain changes; both redistributable.
- Website: https://dejavu-fonts.github.io
- Used for: the OS's own UI and document typeface, shipped on the boot image as
/FONT.TTFand loaded bykernel/gui/ttf.c.
IBM Plex (this website only)
- License: SIL Open Font License (OFL) 1.1
- Website: https://github.com/IBM/plex
- Used for: typography on maytera.net itself, loaded from Google Fonts. It is not bundled with, or used by, MayteraOS the operating system.
Audio and Games
The audio stack vendors several decoders, each under its own upstream license
(see kernel/media/<name>/COPYING or per-file headers in the source): libmad
(MP3, GPLv2+), faad2 (AAC, GPLv2), Tremor/libogg (Vorbis, BSD-style/Xiph), Opus
(BSD-style/Xiph), and dr_flac (FLAC, public domain / MIT-0). TinyGL
(userland/libgl) is zlib-licensed and backs the software 3D used by the
GL demo apps and ports like AssaultCube/OpenArena.
DOOM (engine source only)
- License: id Software's own DOOM Source Code License, a separate, more restrictive license than the GPL, carried in the per-file source headers.
- Original: id Software
- Location: ported as a userland app,
userland/apps/doom/(launched from/GAMES/DOOM/DOOM.ELF); there is no DOOM source left in the kernel tree. - Note: only the open-source engine is ported. The commercial game data (DOOM.WAD) is not included and is not distributed with MayteraOS; users must supply their own legally obtained WAD files as compatibility-testing material.
Lemmings-style game
- License: Original MayteraOS implementation
- Note: An original-code game inspired by the classic. No commercial game code or assets are included or distributed; any original game assets would have to be legally obtained and supplied by the user.
Python
/APPS/PYTHON.ELF, the interpreter the Start menu, Files, and the IDE app all
launch, is CPython 3.11.9 cross-compiled freestanding for MayteraOS
(userland/apps/python/port/ holds the MayteraOS-authored launcher and libc
shims; upstream CPython itself is not vendored in this repo and is fetched at
build time). CPython is distributed under the Python Software Foundation
License Version 2, a permissive license compatible with GPLv2-or-later
distribution. A separate, much smaller hand-written subset-of-Python
interpreter also lives in this tree (userland/apps/python/main.c, binary
name python) but is not what the desktop launches; it predates the CPython
port and is original MayteraOS code, not a third-party component. An earlier
MicroPython port (userland/python/micropython/, MIT-licensed port glue over
MicroPython's own MIT license) also remains in the tree but is likewise not
the interpreter the shipping UI launches today.
AI safety layer
Nova prompt-injection ruleset
- License: MIT
- Author: Thomas Roccia (nova-framework)
- Used for: the keyword layer of the AI assistant's prompt-injection defenses (
kernel/security/nova.c)
Photography
The boot splash and bundled wallpapers are edited from Pexels stock photography, used under the Pexels License (free for commercial and non-commercial use, no attribution required). The MayteraOS mark composited onto the splash is original artwork.
Operating System Components
MayteraOS Kernel and userland
- License: GPLv2-or-later for the project's own code (the kernel statically links GPLv2 components such as libmad and faad2, which carries the combined binary's license up to GPLv2-or-later); permissively-licensed vendored components remain under their own terms as source, per component above.
License Compliance Notes
- GPL Components: When distributed as binary, source code availability must be ensured for GPL-licensed components (libmad, faad2, and the project's own GPLv2-or-later code).
- Public Domain / Permissive Components: dr_flac, TinyGL, Duktape, the NetSurf libraries, Tremor/libogg, Opus: attribution retained per component above, no further restriction.
- CC-BY Components: Must retain attribution (SVG Repo icon sources).
- Game Assets: Game WAD files and original game assets are never bundled with MayteraOS; users must legally obtain them separately.
- Third-Party Commercial Software: Any commercial third-party software shown running on MayteraOS (game data, legacy Win16 applications, etc.) is user-supplied compatibility-testing material. MayteraOS does not bundle, include, or distribute any third-party commercial software.
Verified against the source tree at commit a36311c (2026-08-06). This page
is checked against the actual vendored code and build output on each audit
pass, not maintained by memory.